BCSS Cuts Development Costs

Prime Factors' Bank Card Security System (BCSS) is highly-specialized middleware that cuts costs by reducing the amount of programming required to develop and maintain EMV data preparation and a secure card issuance platform. BCSS software is backed by a dedicated support team that provides the answers you need during project planning, implementation and use.

BCSS makes data preparation for EMV as familiar and routine as magnetic stripe card issuance is on your legacy systems. With BCSS you gain control of your card holder data by doing EMV data preparation in-house.

BCSS Benefits

BCSS is highly-specialized middleware that cuts costs by reducing the amount of programming required to develop and maintain a data preparation and secure card issuance platform. Here are key benefits:

Eliminates time-consuming taskssuch as learning new technologies and developing software systems that meet logical security requirements established by the network brands

Provides a cost-effective alternative to software developmentrequired to build a key management system from scratch and replicate compliance requirements for the generation and authorization of security codes and PINs

Eliminates the need to hire specialized expertiseto develop and maintain key management and saves months of development time including integration with Thales HSMs.

Data preparation application layerfurther reduces development time and maintenance plus it shields you from the complexity of EMV issuance, making it feasible to bring EMV issuance in-house.

Utilizes the same legacy systems and processesfor EMV card issuance as those used for magnetic stripe card issuance.

Subroutines– BCSS has more than 100 – reduce the programming required to create and authorize security codes and PINs.

Provides a migration path to EMV, which has much more complex key management requirements

Global leaders use BCSS

The Bank Card Security System (BCSS) is used by programmers to reduce development time, and by end users to simplify key management. BCSS customers include leading card issuers and secure personalization bureaus throughout the world. They incorporate BCSS into their bank card security solutions to save time, money and meet logical security requirements established by the network brands. See a complete list of BCSS customers.

BCSS makes it easier for non-technical key custodians to play their designated role in key management, and was designed to streamline the process of creating keys properly and storing them securely. BCSS makes it easier for you to securely generate, store, distribute and delete cryptographic keys and EMV certificates.

BCSS reduces the need for in-house expertise to develop and keep EMV data preparation and a card issuance system constantly up-to-date, and eliminates all the programming required to make Thales HSMs work in accordance with logical security requirements established by the network brands. See a complete list of BCSS customers.

Questions & Answers

Does Prime Factors sell Thales HSMs?Yes, Prime Factors sells the payShield 9000. We can also help you find a reseller outside the USA.

How is user access to BCSS controlled? BCSS has an authenticated log that records changes to user IDs and user privileges to discourage unauthorized tampering.

Does BCSS provide the ability to migrate from software to HSM-based hardware encryption?Yes, detailed instructions are included in the BCSS Configuration Guide and help you better understand BCSS HSM support.

What types of cryptography are supported by BCSS?BCSS supports 3DES keys and RSA public/private keys as used to support EMV v4.3 specification for chip cards and mag-stripe cards.

Can BCSS output to Datacard Machines?Yes, the BCSS Card Utility feature can map card codes or clear PINs to a file that can be imported into an external device such as Datacard embossers.

Does BCSS support the latest EMV payment standard?Yes. BCSS supports the EMV 4.3 specification for smart (chip) card issuance including a built-in interface to external key distribution facilities and support for ARQC verification and ARPC generation.